Your information
Privacy notice
Plain-English information about what UKSP collects, why it is needed and the choices available to you.
Who controls your data?
Social Photography (UKSP) is the controller for information collected through this website. Contact: hello@socialuk.co.uk. Business contact address: Floor 3, Cambridge library, 7 Lion Yard, Cambridge CB2 3QT.
What is collected?
Authentication information such as your verified email and security-session records; UKSP website account details; membership status and relevant InviteMember, Telegram or Stripe identifiers made available to UKSP; private contact information; enquiries, booking briefs and messages; standard-job dates, addresses, approximate areas, requested services, whether children or adults at risk may be present, safeguarding-responsibility acknowledgements, claims, cancellations and audit records; model, venue and professional-profile applications; uploaded portfolio photographs; customer feedback and publication consent; challenge entries and votes; availability, location and service information; consent records; and essential security or technical records. UKSP does not receive full payment-card details from Stripe.
Why is it used?
To provide memberships and website accounts; process enquiries and bookings; review and publish approved profiles or entries; coordinate models, creatives, venues and events; prevent abuse; communicate service information; keep financial and legal records; handle complaints; and improve UKSP. The lawful bases used are contract, steps requested before a contract, legitimate interests, legal obligation and consent, depending on the activity.
Who receives it?
Supabase processes email authentication and one-time customer verification information, and Resend delivers UKSP sign-in, job-alert and service emails. Information may also be shared only as needed with InviteMember, Telegram, Stripe, website and cloud hosting providers, selected creatives, models, venues, professional advisers, insurers and public authorities. Standard-job summaries show only an approximate area to eligible Professional members. The exact address and customer contact details are released only to the member who securely claims the relevant position and authorised UKSP admin.
How long is it kept?
Active membership and transaction records may be kept for up to six years after the relationship ends where needed for tax, contract or legal records. Unsuccessful applications and ordinary enquiries are normally reviewed for deletion after 12–24 months. Public profiles and portfolio material are kept while active and for a limited administrative period afterwards. Content may be removed earlier where there is no continuing lawful reason to keep it.
International services
Some technology providers may process information outside the UK. Where this happens, UKSP relies on the provider's lawful transfer safeguards and limits the information shared to what the service needs.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing, and may withdraw consent for future use. Some information must still be retained for legal or contractual reasons. There is no solely automated decision-making with legal or similarly significant effects.
Private and public information
Email addresses, telephone numbers, exact job addresses and postcodes, access notes, safeguarding information, cancellation reasons, private complaints, internal account identifiers, payment information, private messages and unpublished profile drafts remain private. Safe job summaries, approximate areas and standard fees appear only in the protected Professional calendar. Only the assigned member may generate a personal calendar event, and UKSP does not create a shared public calendar containing customer data. Customer feedback remains private until UKSP approves it, and is never published without the customer's publication consent.
Cookies and external platforms
The site uses essential technology for security, sign-in and core operation, including a secure UKSP session cookie after successful email verification. Supabase, Resend, InviteMember, Stripe, Telegram, Google, Instagram and other linked services have their own privacy terms when you choose to use them. UKSP will not add non-essential tracking without an appropriate notice and choice.
Children
Model applications are restricted to adults aged 18 or over. Anyone under 18 attending a general community activity must be accompanied by a responsible adult unless separately agreed in writing. UKSP does not knowingly invite children to create independent website accounts or model profiles.
Complaints
Email a data protection complaint to the address above. UKSP will acknowledge it within 30 days, investigate without undue delay, provide progress information and explain the outcome. You may also complain to the Information Commissioner's Office.